Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
File: ur8nIaXXgzW3uX22OuxDXJyji8c.mft (raw, json)
Hash identifier: wMFIEMJDuD/0euXFzufkKihdsChhYFrr15+k2FBulKQ=
Subject key identifier: 06:49:1B:48:0B:8F:32:81:3D:36:CF:AA:A5:6B:1C:14:1F:A9:09:E9
Authority key identifier: BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
Certificate issuer: /CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Certificate serial: 019659147D25BC360DC6D20EDC846DF31E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
Manifest number: 06FA
Signing time: Mon 21 Apr 2025 16:00:37 +0000
Manifest this update: Mon 21 Apr 2025 16:00:37 +0000
Manifest next update: Tue 22 Apr 2025 16:00:37 +0000
Files and hashes: 1: ur8nIaXXgzW3uX22OuxDXJyji8c.crl (hash: ZeT1I9eXiCsCRCBi3/pVbsY5JJyZ4VNN9KA94C8SuZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:7d:25:bc:36:0d:c6:d2:0e:dc:84:6d:f3:1e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Validity
Not Before: Apr 21 16:00:37 2025 GMT
Not After : Apr 22 16:00:37 2025 GMT
Subject: CN=06491b480b8f32813d36cfaaa56b1c141fa909e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:33:1d:bb:c1:bf:4c:b2:65:57:49:88:bf:
8c:5c:7e:3b:e6:98:c8:9c:89:52:9e:1e:78:e0:7a:
71:ca:8f:b6:5b:c6:95:3f:7c:1a:cc:0e:6f:2c:0c:
a1:d8:e2:e5:6d:7a:97:2d:c2:7f:9f:8b:43:e5:70:
2f:d0:fc:74:c4:d3:48:c0:f6:de:66:b6:5c:35:d4:
38:82:58:3d:30:db:31:c1:33:65:f7:0d:2d:f5:52:
39:9f:5d:7b:4c:35:94:5f:ef:e7:77:23:f9:0a:6a:
02:9a:05:6e:8c:97:ff:44:f1:a1:84:c3:9c:f3:a7:
f2:30:21:a6:88:91:9b:41:12:70:57:87:c0:27:07:
44:99:33:a0:14:fe:5d:10:91:6a:7f:ec:ed:4b:27:
4c:cc:87:1e:8d:22:57:ab:63:ea:ae:0a:cc:46:98:
d1:bf:d1:41:36:d5:19:e0:d5:35:57:2a:65:94:f4:
92:40:b6:1e:45:c4:07:19:c7:d0:5b:b3:67:32:07:
a7:6d:10:49:ab:2e:f2:ef:22:bf:1f:d0:0b:d4:f5:
4c:e0:54:b1:f8:69:b2:2b:ef:4c:83:53:e6:93:e0:
d1:a9:68:90:81:48:b4:5c:2c:31:fa:33:c9:5e:4b:
c8:8b:cc:77:cf:53:98:25:dd:66:20:f4:b0:25:b7:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:49:1B:48:0B:8F:32:81:3D:36:CF:AA:A5:6B:1C:14:1F:A9:09:E9
X509v3 Authority Key Identifier:
keyid:BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1d:22:b7:e7:42:6e:df:f3:45:8a:6e:4a:71:4d:c5:b8:96:
95:a2:d7:24:42:de:14:f4:da:18:17:5e:96:6e:cc:3a:f5:87:
dd:33:db:8d:fd:be:2f:ac:d9:42:3e:b3:6f:2e:bb:d4:f9:09:
a4:0d:00:8f:71:db:29:b9:25:ce:7a:25:c7:aa:9a:d7:b0:60:
61:4f:60:e3:00:5b:df:94:2d:4f:94:24:30:19:53:eb:6d:5d:
23:7b:9b:03:fd:2a:0f:26:ea:42:f5:91:8e:0e:de:f2:03:3b:
89:43:cc:6f:fe:d7:07:32:be:b1:fe:4b:b9:b7:a4:5d:a3:d4:
83:49:80:4c:83:df:9e:81:3d:aa:4d:d7:a0:f4:d6:38:34:0d:
cb:92:83:15:cb:80:07:12:4e:7c:cd:7c:cc:31:33:53:7c:93:
67:0a:c1:b0:a2:f7:28:d8:d4:8b:86:01:ff:75:95:1c:09:9e:
31:14:94:e2:9b:12:87:40:05:f8:49:7e:b3:46:95:97:52:c4:
38:ea:ab:37:0f:2b:9e:09:2e:36:5f:df:06:4b:8b:ef:d0:0e:
63:52:12:af:f3:c4:9b:4a:7d:d8:1c:6f:89:59:e4:00:6b:a4:
f5:26:fc:02:e4:98:52:22:2c:4d:82:74:ca:67:b9:73:9f:b3:
f4:c8:d8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:44 2025 by rpki-client